On Fri, 21 Dec 2007 11:18:44 -0500 "Brown Chris-CCB034" <Christopher.Brown@xxxxxxxxxxxx> wrote: > I'm seeing a request come in with a bad http header. Are you sure it's supposed to be HTTP? As opposed to, for example, HTTP encapsulated in something? > Apache is failing on the P.. header because it doesn't contain the > required ":" format. That's clearly not HTTP. > What options do > I have within Apache to allow this bad request to proceed? Is there > a way to turn off Apache's strict header checking? Or am I looking > at making a custom modification to the Apache source code for this > specific case? That'll need source hacking. If we allow malformed requests like that, we open up a whole new playground to the script kiddies. -- Nick Kew Application Development with Apache - the Apache Modules Book http://www.apachetutor.org/ --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|